Access Control Bypass

Overview grumpydictator/firefly-iii is a personal finances manager. Affected versions of this package are vulnerable to Access Control Bypass via the webhook management component. An attacker can access internal resources by sending a crafted POST request. Remediation There is no fixed version fo...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-istio-csr, step-issuer, cert-manager-cmctl, step-issuer-fips, cert-manager-webhook-pdns-fips, aws-privateca-issuer-fips, cert-exporter, cert-manager-cmctl-fips, cert-manager-webhook-pdns, cert-exporter-fips...

The vulnerability of the webhook component of the Git server from Soft Serve allows a hacker to perform an SSRF attack.

The vulnerability of the webhook component of the Git server from Soft Serve relates to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

CVE-2023-41894

Home assistant is an open source home automation. The assessment verified that webhooks available in the webhook component are triggerable via the .ui.nabu.casa URL without authentication, even when the webhook is marked as Only accessible from the local network. This issue is facilitated by the...

CVE-2023-41894: Incorrect Resource Transfer Between Spheres

Home assistant is an open source home automation. The assessment verified that webhooks available in the webhook component are triggerable via the .ui.nabu.casa URL without authentication, even when the webhook is marked as Only accessible from the local network. This issue is facilitated by the...

Home Assistant Security Breach

Home Assistant is an open source home automation management system. The system is primarily used to control home automation devices. A security vulnerability exists in Home assistant versions prior to 2023.9.0, which stems from a security flaw in the component webhook that allows an attacker to...

CVE-2018-1000553

Trovebox version = 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook component that can result in read or update internal resources. This attack appear to be exploitable via HTTP request. This vulnerability appears to have been fixed in after commit 742b8ed...

PT-2018-9448

Name of the Vulnerable Software and Affected Versions Trovebox versions prior to 4.0.0-rc6 after commit 742b8ed contains the fix, implying versions up to 4.0.0-rc6 are affected Description The issue is related to a Server-Side request forgery vulnerability in the webhook component. This can lead ...

Gitlab system_hook_push Remote Code Execution Vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github, with access to a project's file contents, commit history, bug lists, etc. The GitLab Community Edition CE ...